From 85c511f2c42b966e0a62484acdc733ef28ac853b Mon Sep 17 00:00:00 2001
From: Patrik Holmqvist <pahol@sunet.se>
Date: Thu, 3 Apr 2025 12:14:47 +0200
Subject: [PATCH] AUDIT as logfacility name did not work, SC-2670

---
 .../etc/puppet/modules/eid/templates/connector/logback.xml.erb  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global/overlay/etc/puppet/modules/eid/templates/connector/logback.xml.erb b/global/overlay/etc/puppet/modules/eid/templates/connector/logback.xml.erb
index a0bcd3da..2d69107a 100644
--- a/global/overlay/etc/puppet/modules/eid/templates/connector/logback.xml.erb
+++ b/global/overlay/etc/puppet/modules/eid/templates/connector/logback.xml.erb
@@ -11,7 +11,7 @@
   <appender name="<%= syslog_server %>" class="ch.qos.logback.classic.net.SyslogAppender">
     <syslogHost><%= syslog_server %></syslogHost>
     <port>514</port>
-    <facility>AUDIT</facility>
+    <facility>USER</facility>
     <suffixPattern>%msg</suffixPattern>
     <throwableExcluded>true</throwableExcluded>
   </appender>